I am trying to use the token exchange preview feature. I have enabled it OK, and can see it in the UI server info as a preview feature (not a disabled feature). But I'm getting an error, that the client is not allowed to perform the exchange. The docs clearly say that I need to enable a permission on the Identity Provider https://www.keycloak.org/docs/6.0/securing_apps/index.html#_grant_permiss... My problem is that I do not see the Permissions tab when I look at the IDP... :( Can anyone suggest why the Permissions tab might be hidden? Thanks, James ---- *James Mitchell* Developer e: jamesm(a)suitebox.com w: www.suitebox.com *SuiteBox |* Level 4, 8 Mahuhu Crescent, Auckland 1010, NZ _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hi James, Try also enabling admin_fine_grained_authz feature, in addition to token_exchange feature. Cheers, Peter -----Original Message----- From: keycloak-user-bounces(a)lists.jboss.org < keycloak-user-bounces(a)lists.jboss.org&gt; On Behalf Of James Mitchell Sent: Tuesday, September 3, 2019 12:44 AM To: keycloak-user(a)lists.jboss.org Subject: [keycloak-user] Permission fro token exchange I am trying to use the token exchange preview feature. I have enabled it OK, and can see it in the UI server info as a preview feature (not a disabled feature). But I'm getting an error, that the client is not allowed to perform the exchange. The docs clearly say that I need to enable a permission on the Identity Provider https://www.keycloak.org/docs/6.0/securing_apps/index.html#_grant_permiss... My problem is that I do not see the Permissions tab when I look at the IDP... :( Can anyone suggest why the Permissions tab might be hidden? Thanks, James ---- *James Mitchell* Developer e: jamesm(a)suitebox.com w: www.suitebox.com *SuiteBox |* Level 4, 8 Mahuhu Crescent, Auckland 1010, NZ _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user